GHSA-4633-3J49-MH5Q vulnerabilities

Vulnerabilities for packages: langfuse, jitsucom-jitsu...

GHSA-Q8WF-6R8G-63CH vulnerabilities

Vulnerabilities for packages: langfuse, jitsucom-jitsu...

GHSA-89XV-2M56-2M9X vulnerabilities

Vulnerabilities for packages: langfuse, jitsucom-jitsu...

AWS CLI: Overly permissive File Permissions

Summary The AWS Command Line Interface AWS CLI is a unified tool for managing AWS services from the command line. Certain CLI subcommands wrote credential and configuration files with world-readable permissions on Unix-like systems with a default umask, allowing other local users on the same host...

EUVD-2026-41116

AWS CLI: Overly permissive File Permissions...

CVE-2026-64209

In the Linux kernel, the following vulnerability has been resolved: phy: qcom: qmp-usbc: Fix out-of-bounds array access in dp swing config swingtbl and preemphasistbl are 4x4 arrays valid indices 0-3, but the boundary check uses " 4" instead of "= 4", allowing index 4 to cause an out-of-bounds...

USN-8605-1 linux-azure-fde-6.17 vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - Foo-over-UDP FOU; - ARM64 architecture; - x86 architecture; - Block layer subsystem; - Cryptographic API; - Drivers...

USN-8605-1: Linux kernel (Azure CVM) vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - Foo-over-UDP FOU; - ARM64 architecture; - x86 architecture; - Block layer subsystem; - Cryptographic API; - Drivers...

USN-8604-1 linux-azure-6.17 vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - Foo-over-UDP FOU; - ARM64 architecture; - x86 architecture; - Block layer subsystem; - Cryptographic API; - Drivers...

USN-8604-1: Linux kernel (Azure) vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - Foo-over-UDP FOU; - ARM64 architecture; - x86 architecture; - Block layer subsystem; - Cryptographic API; - Drivers...

CVE-2026-55831 vulnerabilities

Vulnerabilities for packages: apache-pulsar-fips, strimzi-kafka-operator-fips, airbyte-server-fips, kafka-bridge-fips, traccar-fips, opensearch-fips, conductor, tez, spark, logstash, traccar, cloudwatch-exporter, infinispan, floci-az, celeborn, nuxeo, apache-pulsar, flyway, camunda, neo4j,...

CVE-2026-59898 vulnerabilities

Vulnerabilities for packages: apache-pulsar-fips, strimzi-kafka-operator-fips, airbyte-server-fips, kafka-bridge-fips, traccar-fips, opensearch-fips, conductor, tez, spark, logstash, traccar, cloudwatch-exporter, infinispan, floci-az, celeborn, nuxeo, apache-pulsar, flyway, camunda, neo4j,...

CVE-2026-56821 vulnerabilities

Vulnerabilities for packages: thingsboard, management-api-for-apache-cassandra-5.0, cassandra, tez...

GHSA-272M-GCWP-MPWG vulnerabilities

Vulnerabilities for packages: thingsboard, management-api-for-apache-cassandra-5.0, cassandra, tez...

CVE-2026-56820 vulnerabilities

Vulnerabilities for packages: thingsboard, management-api-for-apache-cassandra-5.0, cassandra, tez...

CVE-2026-56822 vulnerabilities

Vulnerabilities for packages: thingsboard, management-api-for-apache-cassandra-5.0, cassandra, tez...

CVE-2026-55833 vulnerabilities

Vulnerabilities for packages: apache-activemq-artemis, infinispan, thingsboard, logstash, apache-pulsar, cloudwatch-exporter, apicurio-registry, wavefront-proxy, apache-nifi, management-api-for-apache-cassandra-5.0, kserve-modelmesh, neo4j, spark, opensearch, strimzi-kafka-operator, zipkin,...

CVE-2026-66141

Exim before 4.99.5 allows .forward privilege escalation because forcecommand for a pipe transport is mishandled...

CVE-2026-66141

Exim before 4.99.5 allows .forward privilege escalation because forcecommand for a pipe transport is mishandled...

SUSE CVE-2026-10050

In Eclipse Jetty, the Digest authentication server-side component uses ISO-8859-1 to encode the password as bytes. This was done because the initial specification for HTTP did not specify explicitly a charset, and it was assumed to be ISO-8859-1 for historical reasons. If the password contains...